All notable changes to the Vezgo SDK across versions will be documented in this file.
- Document the
predictionswidget feature flag: addpredictionsto the documentedproviderCategoriesvalues, describe thefeaturesoption in the README and insrc/index.d.ts, and make the basic example configurable viaVEZGO_CLIENT_FEATURES. No runtime behaviour change — the SDK already forwardedfeaturesto the widget. - Security: resolve all dependency advisories reachable from the published package.
apisauce3.0.1 -> 3.2.2 (pulls axios 1.6.8 -> 1.19.0, which requiresform-data= 4.0.6 and
follow-redirects>= 1.16.0) andjsonwebtoken9.0.2 -> 9.0.3 (pullsjws>= 4.0.1). This clears a critical advisory inform-data, a high-severity improper-HMAC-verification advisory injws, and 14 high-severity axios SSRF / prototype-pollution / credential-leak advisories. - Build/tooling only (no effect on consumers): removed unused devDependencies (the
Babel toolchain,
eslint-config-airbnb-base,eslint-plugin-import,vite-plugin-static-copy), upgraded vite/vitest/eslint/prettier, and fixed the eslint flat config so build output is no longer linted. Building the SDK now requires Node >= 20.19; the published bundles still target Node 18+.
- Fix the Connect widget closing on non-terminal
ERRORevents from vezgo-app (INVALID_CREDENTIALS,SECURITY_QUESTION_REQUIRED, etc.) so users can retry credentials inline, and restore the singleton-as-module-export DX so consumers can callrequire('vezgo-sdk-js').init(...)without the.defaultworkaround.
- Add
accounts.getKYCData(id)for the newGET /accounts/:id/kyc-dataendpoint. Returns the KYC payload on success, ornullif no data has been captured yet for the account (404). Throws on 403 (KYC feature not enabled for the team) and other errors.
- Add
DUPLICATE_CONNECTIONerror handling: newDuplicateConnectionErrorclass (exported from package root) thrown on 409 responses from accounts endpoints, and Connect widgetERRORevents now route toonErrorwith{ type: 'DUPLICATE_CONNECTION', existing_institution_id }.
- Fix listing jsonwebtoken dependency
- Fix lib paths
- Vite Build
- Added React/Typescript example app
- Update typescript types
- Export typescript types and interfaces
- Update readme for basic example
- Add
providersPreferencessupport foruser.connect(),user.reconnect()&user.getConnectData()
- Add
disabledProvidersproviders array support foruser.connect(),user.reconnect()&user.getConnectData().
- Upgrade jsonwebtoken dependency to 9
- Allow copy/write to clipboard for WalletConnect widget in Widget Mode.
- Add support for
hideWalletConnectWalletsto allow hiding WalletConnect wallets list in Vezgo Connect flow.
- Bumped apisauce package to 3.0.1 to get rid of CSRF vulnerability in axios.
- Fix required params in ts interface
- Update basic example to display network in list of connected wallets in multi wallet mode
- Add support for
multiWalletflag which allows to connect multiple wallets in one take and return list of connectedaccounts
- Added support for fetching orders
- Support
alternate_namesif available in providers list
- Rework TypeScript headers (not likely but could be breaking change depending on how you use TypeScript)
- Update basic example instruction
- Add support for provider_categories parameter in
user.connect(),user.reconnect()anduser.getConnectData().
- Add support for exclude_fields parameter in
user.transactions.getList().
- Added vezgo-direct-api example app
- Add VEZGO_CLIENT_THEME and VEZGO_CLIENT_PROVIDERS_PER_LINE configs to example app
- Add
dotenvto example app - Add support of connectionType: 'GET' for connect and reconnect methods for local development
- Add
featuresflag to enable certain experimental features. - Allow passing query parameters to
vezgo.providers.getList()call.
syncNftsflag changed totrueby default, passfalseif you need to disable it. Besidessync_nftsfeature should be enabled for yourApp Project.
- Add
syncNftsflag support foruser.connect()anduser.getConnectData().
- Add Declaration Files enable a bit of TS support (thanks to @zcuric)
- Bugfix: add missing body in accounts.sync() request (issues/37)
- Bugfix: hide visible form
- Bugfix: remove iFrame on close widget instead of hiding
- Add
theme(light | dark) support foruser.connect(),user.reconnect()&user.getConnectData(). - Add
providersPerLine(1 | 2) support foruser.connect(),user.reconnect()&user.getConnectData().
- Add keywords
- Add annotation
- Readme fix
Note: Latest Vezgo Connect requires to be opened via POST request with token in the form data.
- Add
user.getConnectData()to get Vezgo Connect URL and authorization token. - Delete
user.getConnectData(). user.connect()anduser.reconnect()updated accordingly.
- Allow passing extra query params to API calls.
- Fix missing lang parameter in
user.connect(). - Update default origin for
user.connect()to the full url origin.
- Add
lang: 'es'support foruser.connect(),user.reconnect()&user.getConnectData().
- Add
user.history.getList()to get account balance history.
- Add
user.accounts.sync()to trigger an account sync. - Add
providersparameter touser.connect()&user.getConnectData()to control the list of providers in Vezgo Connect.
- Fix an issue with
authorizerfunction breaking all User API method helpers.
- Add
walletparameter touser.transactions.getList()to support querying by wallet. - Add
lastandlimitparameters touser.transactions.getList()to support pagination.
- Add
user.reconnect()for reconnecting a disconnected account.
- Fix broken NodeJS build caused by build setup.
- Add
user.accounts.remove(id)method.
- Make
originparameter optional in NodeJS foruser.getConnectData().
- Add
user.connect()method for connecting an account via the drop-in Vezgo Connect Widget.
- Add partial support for ReactNative.
- Add
minimumLifetimeparameter touser.getToken()method.
- Change all methods that rely on token to automatically renew token.
- Change
vezgo.login()andVezgo.init()to be synchronous.
- Fix token renew.
- Add browser auth parameters (
authEndpoint,auth { params, headers },authorizer) toVezgo.init()